Re: [PATCH] audit: add task history record
Paul Moore <[email protected]> Wed, 23 Aug 2023 10:48:47 -0400
| Newsgroups | com.redhat.linux-audit,org.kernel.vger.audit,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <CAHC9VhTPgnzdn1tmEmufcbseN_Q1CyzxTEzfvZW7OCBTeAadmA@mail.gmail.com> |
T24gV2VkLCBBdWcgMjMsIDIwMjMgYXQgMTA6MTjigK9BTSBUZXRzdW8gSGFuZGEKPHBlbmd1aW4t a2VybmVsQGktbG92ZS5zYWt1cmEubmUuanA+IHdyb3RlOgo+IE9uIDIwMjMvMDgvMjIgMTozNSwg UGF1bCBNb29yZSB3cm90ZToKPiA+PiAgICJhdWRpdGN0bCAtRCIgbXVzdCBub3QgY2xlYXIgcnVs ZXMgZm9yIHRyYWNpbmcgZm9yaygpL2V4ZWN2ZSgpL2V4aXQoKQo+ID4+ICAgc3lzdGVtIGNhbGxz LiBUaGlzIGlzIGltcG9zc2libGUgYmVjYXVzZSB0aGlzIGNoYW5nZSB3aWxsIGJyZWFrIHVzZXJz cGFjZQo+ID4+ICAgcHJvZ3JhbXMgZXhwZWN0aW5nIHRoYXQgImF1ZGl0Y3RsIC1EIiBjbGVhcnMg YWxsIHJ1bGVzLgo+ID4KPiA+IEl0J3MgYSBnb29kIHRoaW5nIHRoYXQgJ2F1ZHRpY3RsIC1kIC4u LicgZXhpc3RzIHNvIHRoYXQgb25lIGNhbgo+ID4gc2VsZWN0aXZlbHkgZGVsZXRlIGF1ZGl0IHJ1 bGVzIGZyb20gdGhlIGtlcm5lbC4gIElmIHNvbWVvbmUgd2FudHMgdG8KPiA+IHByZXNlcnZlIHNw ZWNpZmljIGF1ZGl0IHJ1bGVzLCB0aGF0IGlzIHRoZSB3YXkgdG8gZG8gaXQ7ICdhdWRpdGN0bCAt RCcKPiA+IGlzIGEgdmVyeSBjb2Fyc2UgdG9vbCBhbmQgbm90IHNvbWV0aGluZyB0aGF0IGlzIGxp a2VseSB2ZXJ5IHVzZWZ1bCBmb3IKPiA+IHVzZXJzIHdpdGggc3RyaWN0IGF1ZGl0aW5nIHJlcXVp cmVtZW50cy4KPgo+IEluIG1vc3Qgc3lzdGVtcywgImF1ZGl0Y3RsIC1EIiBpcyB0aGUgZmlyc3Qg Y29tbWFuZCBkb25lIHZpYSAvZXRjL2F1ZGl0L2F1ZGl0LnJ1bGVzIGZpbGUuCj4gWW91IGFyZSBh c2tpbmcgYWxsIGFkbWluaXN0cmF0b3JzIHdobyB3YW50IHRvIGVtdWxhdGUgdGhpcyBwYXRjaCdz IGZ1bmN0aW9uYWxpdHkgdXNpbmcKPiBhdWRpdGQgdG8gY3VzdG9taXplIHRoYXQgbGluZS4gV2Ug Y2FuJ3QgYWZmb3JkIGFza2luZyBzdWNoIGFkbWluaXN0cmF0b3JzIHRvIGJlY29tZQo+IHNwZWNp YWxpc3Qgb2Ygc3RyaWN0IGF1ZGl0aW5nIGNvbmZpZ3VyYXRpb25zLCBhcyB3ZWxsIGFzIHdlIGNh bid0IGFmZm9yZCBhc2tpbmcKPiBldmVyeSBhZG1pbmlzdHJhdG9yIHRvIGJlY29tZSBzcGVjaWFs aXN0IG9mIHN0cmljdCBTRUxpbnV4IHBvbGljeSBjb25maWd1cmF0aW9ucy4KCklmIGFuIGFkbWlu aXN0cmF0b3IvdXNlciBuZWVkcyB0byBjb25maWd1cmUgdGhlIGF1ZGl0IHN1YnN5c3RlbSB0byBk bwpzb21ldGhpbmcsIHJlbW92aW5nIG9uZSBsaW5lIGluIGEgY29uZmlndXJhdGlvbiBmaWxlIHNl ZW1zIGxpa2UgYSB2ZXJ5CnJlYXNvbmFibGUgdGhpbmcgdG8gZG8uICBZb3UgY2FuIGV4cGVjdCB0 aGUgZGVmYXVsdCBjb25maWd1cmF0aW9uIG9mCmV2ZXJ5IExpbnV4IGRpc3RyaWJ1dGlvbiB0byBm aXQgZXZlcnkgY29uY2VpdmFibGUgdXNlIGNhc2UuCgo+IExpa2UgU3RldmUgR3J1YmIgbWVudGlv bnMsIHRlY2huaWNhbGx5IHBvc3NpYmxlIGFuZCBwcmFjdGljYWxseSBhZmZvcmRhYmxlIGFyZQo+ IGRpZmZlcmVudC4gVGhlIGF1ZGl0IHN1YnN5c3RlbSBjb3VsZCBoYW5kbGUgdGhlIGxvYWQsIGJ1 dCB0aGUgc3lzdGVtIGFkbWluaXN0cmF0b3IKPiBjYW4ndCBoYW5kbGUgdGhlIGxvYWQuCgpJZiBh biBhZG1pbmlzdHJhdG9yL3VzZXIgd2FudHMgdGhpcyB0eXBlIG9mIGluZm9ybWF0aW9uIGluIHRo ZWlyIGF1ZGl0CmxvZ3MgdGhleSBuZWVkIHRvIGJlIHByZXBhcmVkIHRvIGhhbmRsZSB0aGF0IGlu Zm9ybWF0aW9uLgoKPiBUaGF0J3Mgd2h5IEkgc2FpZAo+Cj4gICBUaGF0IGlzIGEgIk5vIExTTSBt b2R1bGVzIG90aGVyIHRoYW4gU0VMaW51eCBpcyBuZWVkZWQgYmVjYXVzZSBTRUxpbnV4IGNhbiBk bwo+ICAgZXZlcnl0aGluZyIgYXNzZXJ0aW9uLgoKV2hhdD8gIFRoYXQgZG9lc24ndCBtYWtlIGFu eSBzZW5zZSBmb2xsb3dpbmcgd2hhdCB5b3Ugc2FpZCBhYm92ZS4KWW91J3JlIHN0YXJ0aW5nIHRv IGNoZXJyeSBwaWNrIHF1b3RlcyBhbmQgYXBwbHkgdGhlbSBvdXQgb2YgY29udGV4dCwKd2hpY2gg b25seSBodXJ0cyB5b3VyIGFyZ3VtZW50IGZ1cnRoZXIuCgo+IGFuZCB5b3VyIHJlc3BvbnNlCj4K PiAgIEV4Y2VwdCB3ZSBhcmUgbm90IHRhbGtpbmcgU0VMaW51eCBvciBMU01zIGhlcmUsIHdlIGFy ZSB0YWxraW5nIGFib3V0Cj4gICBhdWRpdCBhbmQgdGhlIGF1ZGl0IHN1YnN5c3RlbSBpcyB2ZXJ5 IGRpZmZlcmVudCBmcm9tIHRoZSBMU00gbGF5ZXIuCj4gICBUaGUgTFNNIGxheWVyIGlzIGRlc2ln bmVkIHRvIGJlIHBsdWdnYWJsZSB3aXRoIHN1cHBvcnQgZm9yIG11bHRpcGxlCj4gICBpbmRpdmlk dWFsIExTTXMsIHdoZXJlYXMgdGhlIGF1ZGl0IHN1YnN5c3RlbSBpcyBkZXNpZ25lZCB0byBzdXBw b3J0IGEKPiAgIHNpbmdsZSBhdWRpdCBpbXBsZW1lbnRhdGlvbi4KPgo+IGlzIHRvdGFsbHkgbWlz c2luZyB0aGUgcG9pbnQuCgpJdCBtYWtlcyBwZXJmZWN0IHNlbnNlIGluIHRoZSBvcmlnaW5hbCBj b250ZXh0LCBzZWUgbXkgY29tbWVudCBhYm92ZSwKYW5kIHBlcmhhcHMgZ28gcmUtcmVhZCB0aGF0 IG9yaWdpbmFsIGVtYWlsLgoKPiBGb3IgZXhhbXBsZSwgZG9pbmcKPgo+ICAgYXVkaXRjdGwgLWEg ZXhpdCxhbHdheXMgLUYgYXJjaD1iNjQgLVMgZXhpdCxleGl0X2dyb3VwCj4KPiAoaW4gb3JkZXIg dG8gYWxsb3cgdXNlcnNwYWNlIGRhZW1vbiB3aGljaCB0cmllcyB0byBlbXVsYXRlIHRoaXMgcGF0 Y2gncwo+IGZ1bmN0aW9uYWxpdHkpIHdpbGwgbGV0IGF1ZGl0ZCB0byBnZW5lcmF0ZSBwcm9jZXNz IHRlcm1pbmF0aW9uIGxvZ3MgdmlhIGV4aXQoKQo+IHN5c3RlbSBjYWxsLiBUaGlzIGNvbW1hbmQg YWxvbmUgY2FuIGdlbmVyYXRlIHRvbyBtdWNoIHN0cmVzcyBvbiBhIGJ1c3kgc3lzdGVtCj4gKHBl cmZvcm1hbmNlIERvUyBhbmQgc3RvcmFnZSBEb1MpLgoKSG93ZXZlciwgaW4gdGhpcyB2ZXJ5IHNh bWUgZW1haWwsIGEgZmV3IHBhcmFncmFwaHMgYWJvdmUgeW91IGNvbmNlZGVkCnRoYXQgIlRoZSBh dWRpdCBzdWJzeXN0ZW0gY291bGQgaGFuZGxlIHRoZSBsb2FkIi4KCj4gQW5kIG1vcmVvdmVyLCB0 aGlzIGNvbW1hbmQgd2lsbCBub3QgbGV0Cj4gYXVkaXRkIHRvIGdlbmVyYXRlIHByb2Nlc3MgdGVy bWluYXRpb24gbG9ncyB2aWEga2lsbCgpIHN5c3RlbSBjYWxsLgo+Cj4gICBraWxsIC05ICQkCj4K PiBBdWRpdGluZyBraWxsIHN5c3RlbSBjYWxsIG1heSBnZW5lcmF0ZSBtb3JlIHN0cmVzcyB0aGFu IGF1ZGl0aW5nIGV4aXQgc3lzdGVtIGNhbGwuCj4gVG9vIG11Y2ggbm9pc3kgbG9ncyBmb3IgY2F0 Y2hpbmcgdGhlIGV4YWN0IG9uZSBldmVudCB3ZSB3YW50IHRvIGtub3cuCgpXZSd2ZSBhbHJlYWR5 IGRpc2N1c3NlZCB0aGlzIGJvdGggZnJvbSBhIGtlcm5lbCBsb2FkIHBlcnNwZWN0aXZlIChpdApz aG91bGQgYmUgYWJsZSB0byBoYW5kbGUgdGhlIGxvYWQsIGlmIG5vdCB0aGF0IGlzIGEgc2VwYXJh dGUgcHJvYmxlbQp0byBhZGRyZXNzKSBhcyB3ZWxsIGFzIHRoZSBodW1hbiBwZXJzcGVjdGl2ZSAo aWYgeW91IHdhbnQgYXVkaXRpbmcsCnlvdSBuZWVkIHRvIGJlIGFibGUgdG8gaGFuZGxlIGF1ZGl0 aW5nKS4KClRldHN1bywgYXMgc2hvdWxkIGJlIGFwcGFyZW50IGF0IHRoaXMgcG9pbnQsIEknbSBm aW5kaW5nIHlvdXIKYXJndW1lbnRzIHVuY29udmluY2luZyBhdCBiZXN0LCBhbmQgY29uZnVzaW5n IGF0IHdvcnN0LiAgSWYgeW91IG9yCnNvbWVvbmUgZWxzZSB3YW50cyB0byB0YWtlIGEgZGlmZmVy ZW50IGFwcHJvYWNoIHRvd2FyZHMgYXJndWluZyBmb3IKdGhpcyBwYXRjaCBJJ2xsIGVudGVydGFp biB0aGUgZGlzY3Vzc2lvbiBmdXJ0aGVyLCBidXQgcGxlYXNlIGRvIG5vdApyZXBseSBiYWNrIHdp dGggdGhlIHNhbWUgYXBwcm9hY2g7IGl0IHNpbXBseSBpc24ndCBjb25zdHJ1Y3RpdmUgYXQKdGhp cyBwb2ludC4KCi0tIApwYXVsLW1vb3JlLmNvbQoKLS0KTGludXgtYXVkaXQgbWFpbGluZyBsaXN0 CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly9saXN0bWFuLnJlZGhhdC5jb20vbWFpbG1h bi9saXN0aW5mby9saW51eC1hdWRpdAo=